We have created a newversion of the su command called runuser, which
will run a program as a different user. The command can only be run
as root and will not use pam or prompt for passwords. Otherwize it
works exactly as su. This change is needed by SELinux in order to
support proper transitioning on process execution.
Attached is a patch to the vncserver.init file to make the change.